Centralized exchange in Vanuatu
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in Vanuatu with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- AML/CTF Act [CAP 264] mandates VASPs to register with the Vanuatu Financial Intelligence Unit (FIU) and comply with AML/CTF obligations including CDD, record-keeping, and suspicious transaction reporting (vu.aml.virtual-assets-the-most-likely, vu.aml.virtual-asset-service-provider-vasp)
- VASP license application must include AML/CTF compliance policies and procedures under Section 17 of VAPA 2023 (vu.licensing.policies-and-procedures-for-compliance)
- Ongoing obligation to maintain robust risk management systems and internal controls under Section 19, VAPA 2023 (vu.licensing.risk-management-and-internal-controls)
- Record-keeping obligations requiring clear identification of ownership of each client's virtual assets under Section 22, VAPA 2023 (vu.licensing.a-vasp-must-maintain-adequate)
- Fit and proper person assessments required for directors and senior management under Section 14, VAPA 2023 (vu.licensing.fit-and-proper-persons-section)
Key Restrictions
- Cryptocurrencies are not legal tender in Vanuatu (vu.aml.the-reserve-bank-of-vanuatu)
- Client virtual assets must be held separately from the VASP's own assets and not used to satisfy any liability of the VASP — Sections 20(1) and 20(2), VAPA 2023 (vu.licensing.a-vasp-must-hold-a, vu.licensing.virtual-assets-held-by-a)
- VASP is prohibited from using, dealing with, or disposing of client virtual assets without explicit client consent, except as authorized by law or court order — Section 21, VAPA 2023 (vu.licensing.a-vasp-is-prohibited-from)
- Minimum unimpaired paid-up capital must be maintained at all times as prescribed by the Minister (specific thresholds not yet detailed in regulation) — Section 18, VAPA 2023 (vu.licensing.capital-requirements-section-18-vapa)
Key Risks
- Capital threshold regulations under Section 18, VAPA 2023 are not yet fully detailed, creating regulatory uncertainty (vu.licensing.specific-capital-thresholds)
- Lack of specific, publicly detailed enforcement actions against crypto entities in Vanuatu over the past three years indicates limited regulatory track record and potential unpredictability (vu.aml.lack-of-specific-publicly-detailed, vu.aml.despite-thorough-searches-of-vfsc)
- Detailed cybersecurity requirements including cold/hot storage ratios are not yet fully specified (vu.licensing.detailed-cybersecurity-requirements-potentially-touching)
- General consumer protection and contract law governs stablecoin redemption rights — no specific regulatory framework ensuring timely redemption (vu.aml.redemption-rights-would-primarily-be, vu.aml.general-consumer-protection-laws-or)
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Virtual Asset Providers Act No. 27 of 2023 (VAPA 2023): This is the cornerstone legislation for virtual assets, including custody services. It defines "virtual assets," "virtual asset service providers" (VASPs), and sets out licensing and operational requirements.
Application Requirements (Section 12, VAPA 2023): An applicant for a VASP license must submit to the VFSC:
Capital Requirements (Section 18, VAPA 2023): A VASP must at all times maintain a minimum unimpaired paid-up capital as prescribed by the Minister through regulation. This regulation is yet to be fully detailed.
Fit and Proper Persons (Section 14, VAPA 2023): Directors and senior management must meet "fit and proper" criteria established by the VFSC, demonstrating competence, integrity, and financial soundness.
Client Assets (Sections 20, 21, 22, VAPA 2023):
A VASP must hold a client’s virtual assets separate from its own assets and the assets of other clients (Section 20(1)).
Virtual assets held by a VASP on behalf of a client are not to be used to satisfy any liability of the VASP or form part of its assets (Section 20(2)).
A VASP is prohibited from using, dealing with, or otherwise disposing of a client's virtual assets without the client's explicit consent, except as authorized by law or a court order (Section 21).
A VASP must maintain adequate records that clearly identify the ownership of each client's virtual assets (Section 22).
Risk Management and Internal Controls (Section 19, VAPA 2023): A licensed VASP must implement robust risk management systems and internal controls designed to ensure the security, integrity, and operational resilience of its services, which could implicitly encourage or require consideration of insurance.
Financial Soundness and Capital Requirements (Section 18, VAPA 2023): The requirement for adequate capital is intended to provide a buffer against operational risks, though it's not a direct substitute for insurance.
Policies and procedures for compliance with the AML/CTF Act (Section 17).
Specific capital thresholds.
Detailed cybersecurity requirements, potentially touching on cold/hot storage ratios.
Virtual Assets: The most likely general classification is "Virtual Assets" or "Digital Assets" under the Anti-Money Laundering and Counter-Terrorism Financing Act (AML/CTF Act) [CAP 264]. This act defines "virtual asset" broadly and mandates AML/CTF obligations for Virtual Asset Service Providers (VASPs).
Virtual Asset Service Provider (VASP) Obligations: The AML/CTF Act [CAP 264] mandates that entities providing "virtual asset services" (which would include stablecoin exchanges, transfers, custody, etc.) are considered VASPs and must comply with AML/CTF obligations, including registration with the Vanuatu Financial Intelligence Unit (FIU) and implementing robust KYC/CDD procedures.
The Reserve Bank of Vanuatu (RBV) has issued clarifications regarding the legal status of cryptocurrencies. In November 2022, the RBV reiterated that cryptocurrencies are not legal tender in Vanuatu. While this is a regulatory stance and not an enforcement action against a specific entity, it sets the legal framework within which crypto activities operate.
Lack of Specific, Publicly Detailed Enforcement Actions:
Despite thorough searches of VFSC, RBV, and FIU public notices and reputable financial news sources covering offshore jurisdictions, there are no readily available records of significant, public enforcement actions against specific cryptocurrency entities in Vanuatu over the past three years that detail:
Redemption rights would primarily be governed by the terms and conditions agreed upon between the stablecoin issuer and the holder (i.e., contractual law).
General consumer protection laws or contract laws would apply in case of disputes, but there isn't a specific regulatory framework ensuring timely and full redemption of stablecoins.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a centralized exchange can operate in Vanuatu under a VASP license pursuant to the Virtual Asset Providers Act No. 27 of 2023, subject to VFSC licensing, AML/CTF obligations, client asset segregation, fit-and-proper requirements, and minimum capital rules (thresholds not yet fully specified).
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?